In the previous thread a gentlemen brought up the point of "certs" for software. I presume he meant things like ISO-9000. Good idea, however it was my understanding that these certifications can take years to get. If you are manufacturing wigets this would be acceptable, but if you doing software it isn't. By the time you get your cert you are already rolling out your newest version. In addition, wigets don't really change much, but what happens when you Service Pack or patch something? Are you going to have to re-cert?


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/47/9277#9277